Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/D5mn5aRV5a6WPPo2itnxwb5aL8I.asa
File:                     D5mn5aRV5a6WPPo2itnxwb5aL8I.asa (raw, json)
Hash identifier:          qQp5JJvL0GZK2rnH/NcesY6hfPDrl8GS8LZsKlyBu7E=
Subject key identifier:   0F:99:A7:E5:A4:55:E5:AE:96:3C:FA:36:8A:D9:F1:C1:BE:5A:2F:C2
Certificate issuer:       /CN=7a80fe5635e6d65cede93b23d4e101d4075337a1
Certificate serial:       019C94541EFAAE76398C20C0C0CC64CE6002
Authority key identifier: 7A:80:FE:56:35:E6:D6:5C:ED:E9:3B:23:D4:E1:01:D4:07:53:37:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/D5mn5aRV5a6WPPo2itnxwb5aL8I.asa
Signing time:             Wed 25 Feb 2026 10:24:26 +0000
ASPA not before:          Wed 25 Feb 2026 10:24:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211854
Providers:                AS: 205684
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:94:54:1e:fa:ae:76:39:8c:20:c0:c0:cc:64:ce:60:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a80fe5635e6d65cede93b23d4e101d4075337a1
        Validity
            Not Before: Feb 25 10:24:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0f99a7e5a455e5ae963cfa368ad9f1c1be5a2fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:43:8a:2a:8f:d9:23:04:cb:86:ba:1d:ed:e9:
                    ae:74:9e:93:4e:b6:8f:70:37:61:29:be:a4:e7:78:
                    11:77:e1:05:0b:a1:57:2e:c4:c1:43:7f:f9:e8:d9:
                    a1:e0:eb:a0:46:91:b9:e2:f8:9f:df:ed:66:53:88:
                    08:26:7a:6f:ee:99:e0:27:a5:2b:fe:8f:9a:36:50:
                    dc:6f:32:b5:81:fb:16:0c:a1:be:97:4b:cf:6d:93:
                    f3:6f:44:2f:d5:68:3c:27:e9:8c:f6:a7:47:19:96:
                    e0:c4:0a:89:c7:49:82:5c:6c:17:e5:c1:e4:d7:b0:
                    98:f9:6a:e0:5d:62:95:86:b3:b6:d4:36:96:9f:3a:
                    ee:87:8f:d8:6f:8a:e8:80:b6:f7:ea:61:54:7e:c8:
                    fa:20:cf:22:12:ae:e6:be:4d:65:61:8a:77:d2:0f:
                    5d:9f:c6:82:cf:76:23:b8:8c:5a:42:47:1c:da:8f:
                    d8:e3:cd:92:85:74:df:79:93:2d:30:a3:ca:f2:e5:
                    9f:bd:67:cd:a6:f6:ae:34:84:44:6d:93:2a:f5:e9:
                    e4:49:04:1a:05:0b:00:45:0e:37:52:0b:f3:c1:06:
                    26:f8:29:f0:0c:9c:11:26:21:d6:e0:13:01:07:e0:
                    68:de:f0:85:4c:0f:08:8a:e5:7d:8c:e4:85:57:1d:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:99:A7:E5:A4:55:E5:AE:96:3C:FA:36:8A:D9:F1:C1:BE:5A:2F:C2
            X509v3 Authority Key Identifier:
                keyid:7A:80:FE:56:35:E6:D6:5C:ED:E9:3B:23:D4:E1:01:D4:07:53:37:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/D5mn5aRV5a6WPPo2itnxwb5aL8I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211854

    Signature Algorithm: sha256WithRSAEncryption
         c2:bd:7e:e6:ec:2c:67:e9:4c:11:bf:90:6c:ff:33:4a:c3:b1:
         7f:bc:40:9d:03:f5:24:cc:96:2a:40:b5:d9:9e:24:32:55:6a:
         41:b8:d9:92:12:2a:fd:66:21:89:5f:01:f1:45:2c:80:61:e7:
         63:6a:8b:87:27:82:ee:2c:3d:83:16:63:8b:8d:5b:75:52:bd:
         f7:5c:a0:7e:86:52:d9:ae:af:f6:f5:f3:2f:4b:0b:b9:f9:cb:
         dc:67:f6:43:22:b8:12:72:7c:57:a4:00:ba:2a:39:7e:d4:d3:
         59:be:39:34:68:9f:06:2f:03:33:9a:98:52:5a:ec:a2:bb:7e:
         d3:8e:7d:58:39:0f:de:7d:25:ce:54:f6:91:3d:c6:55:ab:c8:
         65:79:b8:e2:59:98:46:09:4d:02:38:5e:de:62:f4:d5:bf:8e:
         00:89:d7:b1:eb:30:a2:cf:f2:97:69:83:03:e1:9f:eb:51:f8:
         7b:a5:b5:4a:b0:0d:82:7c:21:73:e3:60:73:8c:8c:c7:c5:dc:
         d0:d4:e0:8c:95:95:3d:34:90:a7:17:9e:5d:6c:db:6c:0a:60:
         2b:41:2d:cb:dd:71:83:1f:a4:24:da:22:76:30:22:05:ee:9c:
         73:bb:3f:db:20:d6:25:cb:28:fe:76:a8:d9:3a:5c:70:49:f1:
         bf:44:4c:35
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZyUVB76rnY5jCDAwMxkzmACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODBmZTU2MzVlNmQ2NWNlZGU5M2IyM2Q0ZTEwMWQ0MDc1
MzM3YTEwHhcNMjYwMjI1MTAyNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjk5YTdlNWE0NTVlNWFlOTYzY2ZhMzY4YWQ5ZjFjMWJlNWEyZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kOKKo/ZIwTLhrod7emudJ6TTraP
cDdhKb6k53gRd+EFC6FXLsTBQ3/56Nmh4OugRpG54vif3+1mU4gIJnpv7pngJ6Ur
/o+aNlDcbzK1gfsWDKG+l0vPbZPzb0Qv1Wg8J+mM9qdHGZbgxAqJx0mCXGwX5cHk
17CY+WrgXWKVhrO21DaWnzruh4/Yb4rogLb36mFUfsj6IM8iEq7mvk1lYYp30g9d
n8aCz3YjuIxaQkcc2o/Y482ShXTfeZMtMKPK8uWfvWfNpvauNIREbZMq9enkSQQa
BQsARQ43UgvzwQYm+CnwDJwRJiHW4BMBB+Bo3vCFTA8IiuV9jOSFVx0XkQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFA+Zp+WkVeWuljz6NorZ8cG+Wi/CMB8GA1UdIwQY
MBaAFHqA/lY15tZc7ek7I9ThAdQHUzehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82ZjA4YTctM2QyYy00ZjgzLTk4NjEt
MzI4MWMwZThlOWZlLzEvRDVtbjVhUlY1YTZXUFBvMml0bnh3YjVhTDhJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82ZjA4YTctM2QyYy00ZjgzLTk4NjEtMzI4MWMwZThlOWZl
LzEvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM7jjANBgkqhkiG
9w0BAQsFAAOCAQEAwr1+5uwsZ+lMEb+QbP8zSsOxf7xAnQP1JMyWKkC12Z4kMlVq
QbjZkhIq/WYhiV8B8UUsgGHnY2qLhyeC7iw9gxZji41bdVK991ygfoZS2a6v9vXz
L0sLufnL3Gf2QyK4EnJ8V6QAuio5ftTTWb45NGifBi8DM5qYUlrsort+0459WDkP
3n0lzlT2kT3GVavIZXm44lmYRglNAjhe3mL01b+OAInXseswos/yl2mDA+Gf61H4
e6W1SrANgnwhc+Ngc4yMx8Xc0NTgjJWVPTSQpxeeXWzbbApgK0Ety91xgx+kJNoi
djAiBe6cc7s/2yDWJcso/nao2TpccEnxv0RMNQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:08 2026 by rpki-client